A Practical Application of SIM/SEM/SIEM Automating Threat Identification

The goal of this paper is to explain how to use a SIEM effectively to identify and respond to security threats. The paper begins with level set information including definitions, capabilities requirements, architecture and a business case. Later I will cover aggregation and correlation design...

By

David Swift

May 21, 2007

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Coolest Careers Poster

SANSがおすすめするサイバーセキュリティの仕事20選: ブルーチーマー - オールラウンドなディフェンダー

ブルーチーマー - オールラウンドなディフェンダーの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Coolest Careers Poster

SANSがおすすめするサイバーセキュリティの仕事20選: 最高情報セキュリティ責任者（CISO）

最高情報セキュリティ責任者（CISO）の主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

5 Advantages of Taking Your Next Blue Team Course via SANS OnDemand

There’s a lot going on in the world right now, but one thing that many experts seem to agree on is that now is the time for the cybersecurity community to be vigilant. Attacks are on the rise and it’s never been more important to keep your skills sharp and ready to defend.If you’re a cyber defender...